Link to home
Create AccountLog in
Avatar of Ray Drummond
Ray DrummondFlag for United States of America

asked on

Access to server thru RWW

Hello Experts

I need to give a standard user in a SBS 2008 network access to the server.  I don't want to make the account a Network Admin because it is an outside user from the company.  The user can access the RWW, but the option to connect to server isn't there.

Is there a way to give this user server access thru RWW without making them a network admin?

Thanks.
SOLUTION
Avatar of ormerodrutter
ormerodrutter
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
membership
Create a free account to see this answer
Signing up is free and takes 30 seconds. No credit card required.
See answer
ASKER CERTIFIED SOLUTION
Avatar of Rob Williams
Rob Williams
Flag of Canada image

Link to home
membership
Create a free account to see this answer
Signing up is free and takes 30 seconds. No credit card required.
Avatar of Ray Drummond

ASKER

They just need to be able to access a billing system on the server.  I don't want them doing anything else.
No I don't think you can achieve your objective without giving him the Admin access. Shouldn't really installed the billing system on the server unless it is a client/server application.
Agreed.
Why are you running the application on the server?
SBS is not intended as an application server. Remote access is for administration only and the server is optimized for background services not applications.
It wasn't me.  This is a client that was picked up that already had a SBS in place.  The prior company installed it all and I'm just trying to make it work.
The problem is the only way to run remote desktop is as an admin on SBS. Though you can limit some permissions this user needs to have admin to logon and full rights to run the application, access the program folder, the data file, and possibly the registry. Very difficult to restrict a user in this situation. You could create a new admin account and using deny permissions restrict access to much of the data, but they would still have the right to administer the server.
Ok, so I guess I'll see what I can do about moving this billing solution to another computer.  They only have the one SBS on their network.  I really don't want here having any kind of access beyond what she absolutely needs.
I can appreciate your predicament but perhaps a PC would be a better option.
Hello,

A workaround for this issue is to place the server in the computer group, give the user the required access , afterwards place the computer back in server group in AD.

The setting is stored.

grtz
Smartsys
Ignoring the fact that moving OU's will not resolve the issue, if you place the SBS in the computer OU, group policy for computers will be applied and could cause all sorts of chaos on a DC.